Merge pull request #107 from EGA-archive/increase_key_size

Increase key size to 4096
EGA-archive · Jun 14, 2020 · 322467a · 322467a
2 parents 38dd926 + dfe901a
commit 322467a
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/deploy/bootstrap/certs.cnf b/deploy/bootstrap/certs.cnf
@@ -56,7 +56,7 @@ emailAddress            = optional
 
 [ req ]
 # Options for the `req` tool (`man req`).
-default_bits        = 2048
+default_bits        = 4096
 distinguished_name  = req_distinguished_name
 string_mask         = utf8only
 

diff --git a/deploy/bootstrap/certs.mk b/deploy/bootstrap/certs.mk
@@ -77,7 +77,7 @@ DOMAIN_EMAIL := -dev.ega@crg.eu
 ###############################################
 ../private/certs/%.sec.pem: | ../private/certs
 	@echo "Creating $(@F)"
-	@$(OPENSSL) genpkey -algorithm RSA -out $@ 2>../private/.err
+	@$(OPENSSL) genpkey -algorithm RSA -pkeyopt rsa_keygen_bits:4096 -out $@ 2>../private/.err
 	@chmod 444 $@
 
 # 444 instead of 400 to solve permission issues when docker-compose is injecting the files